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Sandbox Profiles: 

Available for: iPhone 4S and later, iPoi 

Impact: A malicious application may be 
launch arbitrary binaries on a trusted de 
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not being debugged. This was address^ 
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Code Sign 
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Date(s) 


Info 

Exploit 

Escape 

Defeat 

(reboot) 

(update) 





Leak 


(browser) 




iOS 4 (4.0 - 

Remote 

6/21/2010 - 
3/11/2011 

SafferonSkies 

<NR> 

<NR> ?? 

EarlyKatana 

overrides. plist 

(OTA <NR>) 

4.3.3) 

Local 


SLIDE 


<NR> 



iOS 5 (5.0 - 

Remote 

10/12/2011 - 
5/7/2012 

SunsetSkies 

<NR> 

Corona (5.0.1) ?? 

EarlyKatana 

overrides. plist 

Yes 

5.1.1) 

Local 


SLIDE 


<NR> 

<NR> 



(sys not 
touched) 

iOS 6 (6.x - 

Remote 

9/19/2012 - 
2/16/2013 

Wby 

Rhino 

Cutlass 

SandShrew 

Katana 

overrides. plist 

block 

6.1.2) 

Local 

Redux 



<NR> 

(libamfi) 

launchd.conf 


iOS 6 (6.1 .3 - 

Remote 

3/19/2013- 

5/2/2013 

Wby 

Rhino 

Scimitar 

SandShrew 

Dyonedo 

dirhelper 

block 

6.1.4) 

Local 

Redux 


<NR> 




iOS 7 (7.0 - 

Remote 

9/18/2013 - 
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Eve 

<NR> 
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Piggy 

Dyonedo 
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block 

7.1.2) 

Local 

Redux 
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8.0.2) 

Remote 

9/17/2014 - 
9/25/2014 

Earth 

Saline 
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Nandao 

<NR> 

Dyonedo 

dirhelper 

block 

iOS 8 (8.1 - 
8.1.2) 

Remote 

Local 

10/10/2014 - 
12/19/2014 

Earth 

Saline 

Ircnic 

Nandao 

<NR> 

Dyonedo 

dirhelper 

block 

iOS 8 (8.1 .3 - 

Remote 

1/27/2015 - 

Earth 

Winters ky 

Nandao 

<NR> 

Dyonedo 

mount NFS 

block 

8.2) 

Local 


Saline 







IOS 8.3 

Remote 

4/8/2015 

Earth 

Winters ky 

Nandao 

<NR> 

Juggernaut 

mount NFS 

block 
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Remote 
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Earth 

WinterSky 
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Juggernaut 
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dyonedo dyoned 1 


overrides. plist overrides, plist overrides. plist overrides. plist overrides. plist dirhelper dirhelper dirhelper dirtielper 

launchd.conf launchd.conf 


iOS 8 (8.0 & 8.0.2) 
9/17/2014 - 9/25/2014 


iOS 8.1 -8.1.2 
10/10/2014 - 12/19/2014 


iOS 8.1.3 -8.2 
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IOS 8.3 
4/8/2015 


iOS 8.4 
6/30/2015 


WinterSky WinterSky WinterSky WinterSky 


Sandbox 
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dyonedo 
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